Method handleAuditRules

internal/serverapi/auditrules.go:22–71

(w http.ResponseWriter, r *http.Request)

}

func (a *API) handleAuditRules(w http.ResponseWriter, r *http.Request) {
	if a.auditRuleStore == nil {
		writeJSON(w, http.StatusServiceUnavailable, map[string]any{"error": "audit rule store not configured"})
		return
	}
	switch r.Method {
	case http.MethodGet:
		rules, err := a.auditRuleStore.List()
		if err != nil {
			writeJSON(w, http.StatusInternalServerError, map[string]any{"error": err.Error()})
			return
		}
		if rules == nil {
			rules = []auditrules.Rule{}
		}
		writeJSON(w, http.StatusOK, map[string]any{"rules": rules})
	case http.MethodPost:
		var req struct {
			Type  auditrules.RuleType `json:"type"`
			Value string              `json:"value"`
		}
		if err := json.NewDecoder(r.Body).Decode(&req); err != nil {
			writeJSON(w, http.StatusBadRequest, map[string]any{"error": "invalid json"})
			return
		}
		req.Value = strings.TrimSpace(req.Value)
		if req.Value == "" {
			writeJSON(w, http.StatusBadRequest, map[string]any{"error": "value is required"})
			return
		}
		if req.Type != auditrules.RuleTypeDomainKeyword && req.Type != auditrules.RuleTypePort && req.Type != auditrules.RuleTypeIP {
			writeJSON(w, http.StatusBadRequest, map[string]any{"error": "invalid type"})
			return
		}
		rule := auditrules.Rule{
			ID:        idgen.NextString(),
			Type:      req.Type,
			Value:     req.Value,
			Enabled:   true,
			CreatedAt: time.Now(),
		}
		if err := a.auditRuleStore.Insert(rule); err != nil {
			writeJSON(w, http.StatusInternalServerError, map[string]any{"error": err.Error()})
			return
		}
		writeJSON(w, http.StatusOK, rule)
	default:
		writeMethodNotAllowed(w, http.MethodGet+", "+http.MethodPost)
	}
}

func (a *API) handleAuditRule(w http.ResponseWriter, r *http.Request, id string) {
	if a.auditRuleStore == nil {